CRITICAL🇵🇱 Wersja polska

CVE-2024-31469

CVSS 9.8v3.1pub. 2024-05-14upd. 2025-06-24

There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.

🇵🇱 Read Polish description →

🤖 AI Analysis

How it works

An attacker sends specially crafted UDP packets to port 8211, handled by the PAPI protocol (Aruba's Access Point management protocol). These packets trigger a stack-based buffer overflow (CWE-121) in the Central Communications service. Successful exploitation of the vulnerability requires no authentication or user interaction.

Impact

An attacker can execute arbitrary code with privileged user rights at the operating system level of the device. In practice, this means complete takeover of the vulnerable network device.

Mitigation & patch

Patches available from the manufacturer should be applied according to the references: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us and https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt. As an additional remedial measure, it is recommended to restrict access to UDP port 8211 (PAPI) exclusively to trusted sources at the firewall level.

Who is affected

ArubaNetworks ArubaOS and HP InstantOS products – specific versions indicated in the manufacturer's references (ARUBA-PSA-2024-006 and HPE Security Bulletin hpesbnw04647en_us)

Analysis generated by Claude AI (Anthropic) based on NVD data. Always verify with vendor.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Arubanetworks Arubaos
OS
Arubanetworks
10.3.0.0 – 10.4.1.1 (bez)10.5.0.0 – 10.5.1.1 (bez)
HP Instantos
OS
Hp
6.4.0.0 – 8.6.0.24 (bez)8.7.0.0 – 8.10.0.11 (bez)

🔵